File _patchinfo of Package patchinfo.2855

<patchinfo>
  <issue id="880905" tracker="bnc">VUL-1: CVE-2014-0237: php5,php53: Performance degradation by too many file_printf calls</issue>
  <issue id="880904" tracker="bnc">VUL-0: CVE-2014-0238: php5, php53: DoS in Fileinfo component</issue>
  <issue id="868624" tracker="bnc">VUL-1: CVE-2014-2497: php53,php5,gd: NULL ptr deref in GD XPM decoder</issue>
  <issue id="875826" tracker="bnc">VUL-1: CVE-2014-0185: php53: php-fpm: privilege escalation due to insecure default config</issue>
  <issue id="CVE-2014-0237" tracker="cve" />
  <issue id="CVE-2014-2497" tracker="cve" />
  <issue id="CVE-2014-0185" tracker="cve" />
  <issue id="CVE-2014-0238" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>pgajdos</packager>
  <description>php5 was updated to fix several security issues.

These issues were fixed:
* Performance degradation by too many file_printf calls (CVE-2014-0237)
* DoS in Fileinfo component (CVE-2014-0238)
* NULL pointer dereference in GD XPM decoder (CVE-2014-2497)
* Privilege escalation due to insecure default config (CVE-2014-0185)
</description>
  <summary>php5: Update fixes several security issues</summary>
</patchinfo>
openSUSE Build Service is sponsored by